Changes to Privacy Laws

Staying Ahead in a Shifting Privacy Landscape

Australia's Privacy Act is undergoing significant reforms aimed to strengthen data protection rights and modernise obligations for organisations.

Key changes include the expansion of the definition of 'personal information' to include information such as IP addresses and cookies, stricter requirements for consent, and increased accountability for data breaches.

The reforms also elevate the standard of consent—requiring that it be voluntary, informed, current, and specific. This change will require us to review and update data collection notices and ensure both robust consent mechanisms and clear communication with individuals about the use and disclosure of their data.

Penalties for serious data breaches have increased, heightening the stakes for compliance.

To navigate the changes in the Privacy Act, we are:

• Conducting a comprehensive review of personal information held and processed, including legacy data servers and applications.
• Reviewing and updating our privacy policy, collection notices, and consent protocols.
• Implementing robust data security measures and staff training on breach response procedures.
• Establishing processes for prompt breach detection and notification to affected individuals and the OAIC.

With further reforms expected later this year, addressing these updates is crucial to build trust, minimise legal risk, and uphold high standards of privacy in a rapidly changing regulatory environment.